Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-07-31 15:36:44 to 2026-08-11 17:54:07 UTC [more...]

[PATCH v2 00/13] CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE)
 2026-08-11 17:52 UTC  (8+ messages)
` [PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump
` [PATCH v2 02/13] crash-core: Flush caches on CRASH_WIPE_SECRETS
` [PATCH v2 03/13] arm64/mm: add set_direct_map_default_nosplit()
` [PATCH v2 04/13] mm/secretmem: wipe secret pages before kdump
` [PATCH v2 05/13] security/keys: wipe key payloads "
` [PATCH v2 06/13] security/keys: implement wipe op for user-type keys
` [PATCH v2 07/13] security/keys: implement wipe op for big_key

[PATCH] keys: fix lost wakeup when reaping a dead key type
 2026-08-11 17:37 UTC 

[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump
 2026-08-11 15:18 UTC  (10+ messages)
` [PATCH 1/4] of/kexec: fix typo in comment (usable-memory-range)
` [PATCH 2/4] kexec: add CRASH_ZEROIZE to wipe secrets before kdump
` [PATCH 3/4] mm/secretmem: zeroize secret pages "
` [PATCH 4/4] security/keys: zeroize key payloads "

[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump
 2026-08-11 14:58 UTC  (11+ messages)
    ` [PATCH 2/4] kexec: add CRASH_ZEROIZE to wipe "
    ` [PATCH 4/4] security/keys: zeroize key payloads "

[PATCH v4 00/19] Landlock tracepoints
 2026-08-11 13:51 UTC  (21+ messages)
` [PATCH v4 01/19] landlock: Prepare ruleset and domain type split
` [PATCH v4 02/19] landlock: Move domain query functions to domain.c
` [PATCH v4 03/19] landlock: Split struct landlock_domain from struct landlock_ruleset
` [PATCH v4 04/19] landlock: Split denial logging from audit into common framework
` [PATCH v4 05/19] landlock: Decouple the per-denial logging decision from CONFIG_AUDIT
` [PATCH v4 06/19] landlock: Consolidate access-right and scope names in a shared header
` [PATCH v4 07/19] landlock: Add create_ruleset and free_ruleset tracepoints
` [PATCH v4 08/19] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
` [PATCH v4 09/19] landlock: Add create_domain and free_domain tracepoints
` [PATCH v4 10/19] landlock: Add landlock_enforce_domain tracepoint
` [PATCH v4 11/19] landlock: Add tracepoints for rule checking
` [PATCH v4 12/19] landlock: Add landlock_deny_access_fs and landlock_deny_access_net
` [PATCH v4 13/19] landlock: Add tracepoints for ptrace and scope denials
` [PATCH v4 14/19] selftests/landlock: Add trace event test infrastructure and tests
` [PATCH v4 15/19] selftests/landlock: Add filesystem tracepoint tests
` [PATCH v4 16/19] selftests/landlock: Add network "
` [PATCH v4 17/19] selftests/landlock: Add scope and ptrace "
` [PATCH v4 18/19] selftests/landlock: Add landlock_enforce_domain trace tests
` [PATCH v4 19/19] landlock: Document tracepoints

keys: request_key_auth shows a global pid in /proc/keys across pid namespaces
 2026-08-11  8:34 UTC  (4+ messages)

[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
 2026-08-11  7:19 UTC  (8+ messages)
` [PATCH v4 1/5] landlock: Check landlock_restrict_self(2)'s flags before privileges
` [PATCH v4 3/5] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v4 4/5] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v4 5/5] samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler
` [PATCH v4 2/5] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS

[PATCH v3 0/4] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
 2026-08-11  7:16 UTC  (11+ messages)
` [PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v3 2/4] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v3 3/4] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v3 4/4] samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler

[PATCH] apparmor: fix out-of-bounds write when null terminating a label vec
 2026-08-10 23:56 UTC  (2+ messages)

[PATCH] cred: clarify that task_struct::cred is only for the current task
 2026-08-10 19:41 UTC  (2+ messages)

[PATCH] KEYS: trusted: Fix TPM teardown ordering
 2026-08-10 15:25 UTC  (2+ messages)

[PATCH] apparmor: fix integer overflow in verify_tags() bounds check
 2026-08-10  7:26 UTC  (3+ messages)

[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets
 2026-08-09 19:45 UTC  (12+ messages)

[PATCH v3 00/12] Landlock: Namespace and capability control
 2026-08-09 16:01 UTC  (11+ messages)
` [PATCH v3 04/12] landlock: Rename quiet_masks to quiet_access
` [PATCH v3 05/12] landlock: Wrap per-layer access masks in struct layer_config
` [PATCH v3 06/12] landlock: Copy the quiet mask in the ruleset merge helper
` [PATCH v3 07/12] landlock: Enforce namespace use restrictions
` [PATCH v3 08/12] landlock: Enforce capability restrictions

[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate
 2026-08-09  0:20 UTC 

[PATCH v4 0/5] Fix quota evasion on xfs and add capable_noaudit
 2026-08-07 10:04 UTC  (15+ messages)
` [PATCH v4 1/5] xfs: fix capability check in xfs
` [PATCH v4 2/5] capability: Add new capable_noaudit
` [PATCH v4 3/5] quota: Don't issue audit messages on quota enforcing
` [PATCH v4 4/5] xfs: replace ns_capable_noaudit
` [PATCH v4 5/5] capability: unexport has_capability_noaudit

[PATCH v5 0/2] Add Apple T2 NHI device links
 2026-08-07  1:31 UTC  (4+ messages)
` [PATCH v5 1/2] treewide: Add a flag to detect the Apple T2 chip

[PATCH v2] apparmor: fix cred UAF caused by begin_current_label_crit_section()
 2026-08-07  1:11 UTC  (2+ messages)

[PATCH] smack: fix cred UAF in smack_file_send_sigiotask()
 2026-08-06 19:46 UTC  (2+ messages)

[PATCH v2 00/17] Landlock tracepoints
 2026-08-06 18:22 UTC  (7+ messages)
` [PATCH v2 01/17] landlock: Prepare ruleset and domain type split
` [PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset

[PATCH v3 00/20] Landlock tracepoints
 2026-08-06 17:41 UTC  (6+ messages)
` [PATCH v3 03/20] landlock: Split struct landlock_domain from struct landlock_ruleset
` [PATCH v3 07/20] tracing: Add __print_untrusted_str()

[GIT PULL] selinux/selinux-pr-20260805
 2026-08-06 16:01 UTC  (2+ messages)

[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section()
 2026-08-06 13:14 UTC  (8+ messages)

[REGRESSION] apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7
 2026-08-05 23:45 UTC  (2+ messages)

[PATCH v7] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
 2026-08-05 18:29 UTC  (2+ messages)

[PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support
 2026-08-05 17:24 UTC  (2+ messages)

[PATCH v6] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
 2026-08-05 17:20 UTC  (3+ messages)

[PATCH v4] security: Expand task_setscheduler LSM hook
 2026-08-05 12:32 UTC  (3+ messages)

[RFC PATCH 00/24] pidfd: add a minimal process spawn builder
 2026-08-04 20:25 UTC  (2+ messages)

[PATCH] fs: fix user path of nested backing files
 2026-08-04 17:00 UTC 

Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8
 2026-08-04 14:08 UTC  (2+ messages)

[PATCH v5 00/14] module: Introduce hash-based integrity checking
 2026-08-04 12:44 UTC  (5+ messages)
` [PATCH v5 13/14] kbuild: move handling of module stripping to Makefile.lib
` [PATCH v5 14/14] kbuild: make CONFIG_MODULE_HASHES compatible with module stripping

[syzbot] [lsm?] memory leak in prepare_creds (7)
 2026-08-04  0:09 UTC 

[PATCH net v2] netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init()
 2026-08-03 23:32 UTC  (2+ messages)

[PATCH v2] ima: fix out-of-bounds read in xattr_verify()
 2026-08-03 13:50 UTC 

[PATCH] ima: fix out-of-bounds read in xattr_verify()
 2026-08-03 12:36 UTC  (2+ messages)

[PATCH v6 bpf-next 0/4] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
 2026-08-02 14:50 UTC  (35+ messages)
` [PATCH v6 bpf-next 3/4] "

[PATCH -next,v3] ima: add cond_resched() in ima_calc_file_hash_tfm loop
 2026-08-01 10:50 UTC  (3+ messages)

[PATCH v2 0/3] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
 2026-07-31 22:43 UTC  (9+ messages)
` [PATCH v2 1/3] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v2 2/3] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v2 3/3] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS

[PATCH bpf-next 07/13] bpf: Add the LSM policy kfunc infrastructure
 2026-07-31 22:24 UTC  (2+ messages)

[PATCH bpf-next 05/13] landlock: Factor the credential restriction out of landlock_restrict_self()
 2026-07-31 22:24 UTC  (2+ messages)

[PATCH v6 bpf-next 1/4] security: introduce struct lsm_xattrs
 2026-07-31 22:12 UTC  (2+ messages)

[PATCH 0/3] Implement LANDLOCK_RESTRICT_SELF_NNP_ON_EXEC
 2026-07-31 21:28 UTC  (7+ messages)

[PATCH v5 0/5] landlock: Restrict whiteout object creation
 2026-07-31 21:35 UTC  (7+ messages)
` [PATCH v5 1/5] selftests/landlock: Use an actual chardev for MAKE_CHAR audit test
` [PATCH v5 2/5] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
` [PATCH v5 3/5] selftests/landlock: Add tests for whiteout object creation
` [PATCH v5 4/5] selftests/landlock: Test whiteout object behaviour in OverlayFS renames
` [PATCH v5 5/5] landlock: Link the erratum documentation for whiteout objects

[PATCH v2] security,fs,nfs,net: update security_inode_listsecurity() interface
 2026-07-31 20:24 UTC  (7+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox